Friday, October 08, 2004

ISD Conference '04: Regulatory compliance in the real world

The best way to meet "squishy" security provisions in regulations like Sarbanes-Oxley is to match appropriate controls against anticipated threats and create a defensible case to support those decisions. Otherwise, enterprises risk devoting too few -- or directing too many -- resources to come into compliance, according to Paul Proctor, META Group's vice president of security and risk strategies.

Corporate governance-oriented SOX, which holds public companies' top executives accountable for internal data controls, is especially vague on security. "Sarbanes-Oxley is the absolute worst," Proctor said. "They don't tell you what you need to do at all. Of course, they'll throw you in jail if you don't do it properly."

ISD Conference '04: Regulatory compliance in the real world

Send to a friend:

0 Comments:

Post a Comment

<< Home

Previous articles

Change management provides a launchpad for SOX aud...

Craft your SOX narrative to streamline future docu...

Resellers Rally 'Round SOX (Sarbanes-Oxley)

IBM, partners roll out ID management suite

IT Worker Confidence Takes a Dip

Ernst & Young Review Raises New Independence Quest...

PeopleSoft and Deloitte Launch New Service to Addr...

Corporate Governance Reforms Manageable and Perman...

Too much auditing, not enough auditors

You want me to be your CEO? No way!